A subscription app necessarily touches customer data. Here is exactly what, and what it never does.
What the app uses
| Data | Why the app needs it |
|---|---|
| Subscription contracts | The subscriptions themselves: products, prices, schedule, status. |
| Customer name and email | To show the subscriber on their subscription, let them into their own portal, and send the welcome email with their portal link. |
| Order data | To show real per-delivery status in the portal timeline and link each delivery to its order. |
| Payment method reference | To find the card behind a subscription, so Shopify can email the buyer a secure link to update it. Never the card details themselves. |
| Products and variants | To attach offers and show what is on a subscription. |
| Theme and files | To detect where the widget sits and resolve your logo for the portal. |
What the app never does
- It never stores card or bank details. Payment data stays with Shopify and its payment providers. A card update is done on Shopify's own secure page, reached by a link Shopify emails the buyer.
- It never sells or shares customer data.
- It never sends customer data to an AI model as a way of identifying anyone. Retention features work from behavior on the store: cycles delivered, cycle value, cancel reasons, risk factors.
Deletion
The app implements Shopify's mandatory privacy webhooks: a customer data request, a customer redaction and a shop redaction. Uninstalling the app closes out the store's data on the schedule set out in the privacy policy.
Full detail is in the Miko privacy policy.
Related articles